So, a US based firm offering a spanish version of their website has to apply with GDPR because people from Spain could also visit? Whats next? US firms targeti

So, a US based firm offering a spanish version of their website has to apply with GDPR because people from Spain could also visit? Whats next? US firms targeting the American-Korean community in the US need to apply with laws made in Northkorea? :)